Risk and Privacy Analyst

Job Description

Job Description

WE ARE HEALTHCARE SYSTEMS OF AMERICA. Our mission is to elevate healthcare standards, improve patient outcomes, and create value for communities across the United States. Healthcare Systems of America (HSA) is more than a healthcare provider-we're a community built on excellence, innovation, and compassion. If you're looking for a career that makes a difference, empowers you to grow, and gives you the opportunity to impact lives, HSA is where you belong.

Healthcare Systems of America operates 8 community hospitals across 3 states. We service a multitude of patients and their families across our vast network, while remaining committed to the professional development of our staff, the functional improvement of our patients, and the cultivation of strong partnerships within our communities.

WHAT WE OFFER

• Career Growth & Development - We are an essential, stable and growing company with many opportunities for training and advancement within the medical field that all employees and team members can benefit from.
• Supportive & Inclusive Culture - We foster an environment where every team member is valued, heard, and empowered to succeed.
• Meaningful Work - Every day, you'll contribute to patient care, cutting-edge medical solutions, and life-changing treatment and technologies.

POSITION SUMMARY

The Risk and Privacy Analyst supports the organization's privacy and risk management efforts by conducting assessments, analyzing data protection practices, and monitoring regulatory compliance. This role assists in ensuring adherence to privacy standards and frameworks such as HIPAA, HITECH, and other federal/state regulations relevant to the healthcare industry. The Analyst collaborates across departments to support audits, manage third-party risk, and track compliance metrics.

PRIMARY RESPONSIBILITIES

Privacy & Compliance Support

• Monitor compliance with privacy regulations and internal policies.
• Assist with the development and maintenance of privacy documentation and processes.
• Support the implementation of HIPAA/HITECH privacy and security requirements.
• Help coordinate privacy awareness and training initiatives.

Risk Management

• Conduct risk assessments and document findings and mitigation plans.
• Assist in third-party/vendor risk evaluations and tracking of Business Associate Agreements (BAAs).
• Support enterprise risk reporting and escalation of non-compliance issues.

Incident Support & Documentation

• Document and track incidents related to data privacy or policy violations.
• Support investigation activities and reporting of breaches under HIPAA guidelines.
• Assist in preparing incident summaries and audit documentation.

Audit & Regulatory Readiness

• Help maintain audit-ready documentation for internal and external assessments.
• Track compliance obligations and follow-up on open findings or issues.
• Collaborate with audit teams to gather the required data and reports.

EXPERIENCE/EDUCATION REQUIREMENTS

• Bachelor's degree in Healthcare Administration, Information Security, Law, or a related field.
• Minimum 5 years of experience in healthcare privacy, risk management, or compliance roles.
• In-depth knowledge of HIPAA, HITECH, and applicable federal/state healthcare privacy laws.
• Experience conducting audits, risk assessments, and regulatory reporting in a healthcare environment.
• Excellent organizational, communication, and cross-functional collaboration skills.

PREFERRED QUALIFICATIONS

• Professional certifications: CHPC, CIPP/US, CIPM, CISM, or CRISC.
• Experience with healthcare compliance tools such as OneTrust, ServiceNow, or Archer.
• Background in working with hospitals, clinics, or health systems.
• Familiarity with EMR/EHR systems (e.g., Epic, Cerner).